As is typical of these FTC enforcement actions, the settlement will remain in force for the next 20 years. The GMR settlement signals that the FTC will hold companies to a high bar with regard to third-party vendor management and oversight when it involves personal information.